diff --git a/hy2.sh b/hy2.sh
index ac59123..b308c31 100644
--- a/hy2.sh
+++ b/hy2.sh
@@ -251,7 +251,8 @@ masquerade:
     rewriteHost: true
 EOF
 
-  chmod 600 "${CONFIG_FILE}"
+  chown root:root "${CONFIG_FILE}"
+  chmod 644 "${CONFIG_FILE}"
   green "配置已写入 ${CONFIG_FILE}"
 }